Data User's Statement of Understanding

---

I understand that my data request will have an expected wait time of two to four weeks.  The format that I will receive my data will be delivered via e-mail in a text or Excel file.  I understand my request will not be delivered in paper format such as labels or print outs.  I understand that I will be given access to information contained in university administrative and/or academic computer systems solely for the purpose of fulfilling my official job duties. I agree to keep all information in a manner that is appropriate to its content and to keep any personally identifiable information confidential, kept out of public view and stored in a secure location/form whether it is in paper copy, contained in software, visible on screen displays, in computer readable or any other form. I understand I am solely responsible for my use of this information, including its disclosure to others. I therefore agree not to re-disclose or provide access to this information except as authorized by my job duties and in compliance with federal and state laws and university policy. Neither curiosity nor personal relationships provide a basis for any breach of confidentiality.

I have read the University of Colorado Denver Computing Policy. I have had the opportunity to ask any questions regarding these guidelines or my access to and use of the information answered. I understand providing information for unauthorized uses or otherwise violating university confidentiality policies relating to the information may result in disciplinary action, including my dismissal and prosecution under applicable federal or state laws. If I am a student employee, I understand that misuse also may result in a referral to the Student Judicial Board.

I understand that all personally identifiable information contained in all student education records*, including information available through academic computer systems, is confidential and prohibited from disclosure except as permitted by the Federal Family Educational Rights and Privacy Act (FERPA), and Health Insurance Portability and Accountability Act (HIPAA). I have had the opportunity to have my questions regarding FERPA and HIPAA, the policy and my access to and use of student data answered.

In particular, I acknowledge that under FERPA and the policy:

• Release of student data within the university. Personally identifiable information contained in any student education record made available through these systems may only be used within the university for academic advising or to support other authorized internal university administrative functions. All requests for verification of student records or for other student data from university units with no academic advising responsibilities, and therefore no direct access to the student information system, must be referred to the Office of the Registrar for approval.
• Release of student data outside of the university. All requests for personally identifiable information contained in student education records from individuals or agencies outside the university must be referred to the Office of the Registrar. All personally identifiable information is considered highly confidential and shall be released outside of the university only with the written consent of the student or in compliance with the policy. In addition, a student may refuse to allow the university to disclose even designated directory information outside of the university. The official record of these refusals is maintained in the Office of the Registrar.
• Release of student data for research purposes. The academic computer systems are not designed to support research and may not be used as a database for internal university or external research projects. Such data must be obtained from the Office of Institutional Research and Effectiveness, as appropriate.

* Student education records are defined as any university record that contains information directly related to a student, with the exception of records made by faculty and staff for their own use and not shown to others, campus police law enforcement records, medical/psychological treatment records, some employment records and records created after a student has ceased to enroll.